Skip to content

Commit fe4cbf5

Browse files
thibaultmeyerthibaultmeyer
committed
Upgrade commons-lang3 to 3.18.0 (CVE-2025-48924)
A flaw was found in Undertow where malformed client requests Uncontrolled Recursion vulnerability in Apache Commons Lang. The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop (CWE-674). Signed-off-by: Thibault Meyer <meyer.thibault@gmail.com>
1 parent e115343 commit fe4cbf5

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎pom.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@
7777
<dependency.version.c3p0>0.10.1</dependency.version.c3p0>
7878
<dependency.version.classgraph>4.8.175</dependency.version.classgraph>
7979
<dependency.version.commons-email>1.6.0</dependency.version.commons-email>
80-
<dependency.version.commons-lang3>3.17.0</dependency.version.commons-lang3>
80+
<dependency.version.commons-lang3>3.18.0</dependency.version.commons-lang3>
8181
<dependency.version.flyway>10.18.0</dependency.version.flyway>
8282
<dependency.version.freemarker>2.3.33</dependency.version.freemarker>
8383
<dependency.version.guava>32.0.1-jre</dependency.version.guava> <!-- Because guice use too old guava lib -->

0 commit comments

Comments
 (0)